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(57) Abstract: A smart card transaction (300) allows a consumer to load value onto a smart card (18) and to make purchases using 
a smart card with a mobile telephone handset (102) over the telecommunications network (202). For loading, the system includes: 
a mobile telephone handset (102) including a card reader; a gateway computer (106); a funds issuer computer (204); and an au- 
thentication computer (206). The mobile telephone handset receives a request from a user to load a value onto the smart card. The 
handset generates a funds request message which includes the value and sends the funds request message to a funds issuer computer. 
The funds issuer computer debits an account associated with the user. Next, the handset generates a load request message with a 
cryptographic signature and sends the load request message to an authentication computer which authenticates the smart card. The 
handset receives a response message which includes a cryptographic signature and an approval to load. Finally, the handset validates 
the second cryptographic signature and loads the value onto the smart card. For payment (500), the system includes a merchant 
server (410) and a payment server (412). First, the handset (102) sends an order request message to the merchant server computer, 
and in return receives a purchase instruction message. The handset processes the purchase instruction message locally, and then 
sends a draw request message to a payment server computer. The payment server computer sends a debit message which includes a 
cryptographic signature and an approval to debit the smart card (18). Finally, the handset validates the cryptographic signature and 
debits the smart card. 
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Smart Card Transactions Using Wireless 
5 Telecommunications Network 

FIELD OF THE INVENTION 

The present invention relates generally to smart cards. More specifically, the 
present invention relates to loading value and making purchases using a smart card in 
1 0 conjunction with a mobile telephone. 

BACKGROUND OF THE INVENTION 

Consumers of today have a need to make low-value cash transactions quickly 
and efficiently. The above-referenced U.S. patent applications describe techniques 
whereby a consumer may use a smart card to purchase merchandise over the Internet, 
15 to load value over the Internet, to perform transactions using a "virtual" smart card, 
and to perform transactions using a set-top box, respectively. Even with the above 
techniques, though, there is still a need to use a smart card for low- value cash 
transactions in other scenarios. 

In the prior art, consumers have only been able to load value onto a smart card 
at a fixed device such as an automated teller machine (ATM) or a personal computer 
connected to the Internet and having a card reader. Consumers these days, however, 
are extremely mobile (whether in their car or traveling on business) and may desire to 
load value onto a smart card in many different situations. A consumer may not 
always have access to an ATM or a personal computer with an Internet connection. 
For example, a driver pulling up to a parking meter that accepts a smart card for 
payment may discover that he or she has no value left on the smart card. If there are 
no ATMs nearby, it will be difficult for this person to load value onto the smart card 
in order to use the parking meter. 

FIG. 1 illustrates a prior art loading technique 10. In this technique a loading 
device such as an ATM 14 is used by a consumer to load value onto a smart card 18. 
ATM 14 is a sophisticated smart card terminal that includes not only a smart card 
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reader, but also a hardware processor and software used to implement the loading of 
value onto smart card 18. As such, ATM 14 is an integrated unit as it includes both 
the card reader and the processor. As previously explained, it is not always 
convenient for a consumer to find an ATM in order to load value onto a smart card. 

5 Similarly, consumers may wish to purchase goods and services at other times 

than when they are sitting in front of their computer at home. For example, a 
consumer may wish to purchase airtime for a mobile telephone (handset), directions 
for driving, and other services such as take-out fpod, theater tickets, traffic reports 
and stock purchases while they are in transit. 

10 FIG. 2 illustrates a prior art technique 20 for making a purchase using a smart 

card. Using this technique, a consuifier iis r es a pvirchase terminal 22 located at a 
merchant jn order to make 22 includes not 

5 ;^ rd ^At ^ £ard ware prqee^sorand, software for decrementing value 

tyW\W?$A&:.:$s . st * c *!? teyrpina| -22 is : ^o an ^tpgrated both 
^ \fk e 9 a ^4 reader and processor. As : prpvjo>isly mentjo^^a-cpnsigimer may wish to 
. ^ make a purchase using a smart, card another timesjthan,when the consumer is at a 
merchant. location. . . ... . s . , , . t 

As such, there is a need for these consumers to be able to load value and to 
. purchase goods and services when the consumer is mobile. 

20 A company named' I^ewcom has implemented a dual subscriber identification 

module (SIM) for use in a mobile telephone that allows a consumer to swap SIMs. In 
other words, a consumer may swap a second SIM to provide a new identity for the 
telephone. This technique, however, is unique to a SIM and is not used for loading 
value or making a purchase using a^smart card. The technique implemented by 

25 Newcorn only relates to changing the identity of a telephone. As a telephone is 

essentially a dumb terminal, there are significant challenges to be overcome should a 
mobile telephone be used ih conjunction with smart card transactions. 

Therefore, a system and technique are desirable that would allow a consumer to 
perform smart card transactions using a mobile telephone. 
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SUMMARY OF THE INVENTION 

To achieve the foregoing, and in accordance with the purpose of the present 
invention, a system and technique are disclosed that allow a consumer to load value 
onto a smart card and to make purchases using a smart card with a mobile telephone 
5 handset. 

In a first embodiment, a technique allows the loading of value over a 
telecommunications network onto a smart card. The mobile telephone handset 
receives a request from a user to load a value onto the smart card. The handset then 
generates a funds request message which includes the value and sends the funds 

10 request message over the telecommunications network to a funds issuer computer. 
The funds issuer computer debits an account associated with the user. Next, the 
handset generates a load request message with a cryptographic signature and sends 
the load request message over the telecommunications network to an, authentication 
computer which authenticates the smart card. The handset recjeiyes a response 

15 message which includes a cryptographic signature and an approval to load. Finally, 
the handset validates the second cryptographic signature and loads the value onto the 
. . smart card.. 

In a second embodiment, a technique allows the purchasing of an item over a 
telecommunications network using a mobiie telephone handset. First, the handset 

20 sends an order request message to a merchant server computer, and in return receives 
a purchase instruction message. The handset processes the purchase instruction 
message locally, and then sends a draw request message over the telecommunications 
network to a payment server computer. The payment server computer sends a debit 
message which includes a cryptographic signature and an approval to debit the smart 

25 card. Finally, the handset validates the cryptographic signature and debits the smart 
card, thus the item may be released to a user associated with said smart card. 

With the explosive growth in "mobile-telephones over the past several years, a 

growing number of consumers have access to tireless networks. At the same time, 

the electronic distribution of goods and services to consumers has also increased. 

30 This merchandise includes digitally-delivered goods such as directions, electronic 

tickets, electronic coupons, games and information, as well as prepaid telephone 

service. The present invention brings the convenience of electronic cash to 

-3- 



BNSDOCID: <WO 0109851 A1 J_> 



WO 01/09851 



PGT/USOO/20151 



consumers and makes it available through their mobile telephones for purchase of 
such merchandise. 

The present invention brings smart card tfahsactibhs to the wireless world. It 
provides a load and purchase solution for low- value transactions offering consumers a 
5 wireless equivalent to cash and coins. Offering loading and purchasing through a 
mobile telephone provides cardholders the convenience of loading and purchasing 
without geographic limitation. 

By integrating defined chip commands with the Short Message Service (SMS) 
channel, the handset becomes a remote terminal load and purchase device. SMS is a 

10 wireless processing protocol capable of sending alphanumeric messages. Chip 

commands are implemented as special alphanumeric messages in a defined format, 
6ontairiing security data that use SMS as the communications channel. SMS is used 
as a delivery mechanism that allows Users to place' data in an "envelope" to be sent 
and Mt 6pened" by a destination, thip commarids are integrated by being placed in the 

15 envelope and bpenied by the recipient: J ' 

The present invention provides numerous benefits for consumers, banks, 
merchants and telecommunications service providers. 

For consumers, the present invention provides a simple, easy-to-use, portable 
way to pay for goods and services over a wireless network. A smart card can be 
20 loaded through a network using the cardholder's handset, putting a wireless ATM in 
every pocket or purse. The smart card can also be used in both physical and wireless 
merchant locations to make purchases. - Consumer privacy and anonymity is protected 
throughout the transaction process. , k . ; 

For banks, the present invention provides new mobile banking revenue and 
25 merchant marketing opportunities. Also, a low-value payment solution is provided 
without introducing a separate product or brand or requiring a bank to implement 
significant systems changes; , ■ 

For merchants, the present invention provides a payment solution for low-value 
transactions, enabling merchants to offer a wider range of digital merchandise. Also, 

-4- 



BNSDOCIO <WO 01099S1A1 I > 



WO 01/09851 



PCT/US00/20151 



wireless merchants are provided with access to an existing and growing base of 
cardholders. 

For operators of a wireless network, the value of the network is increased 
through new over-the-air revenue and merchant marketing opportunities. Recently, 
5 wireless networks have become sensitive to month-end consumer billing "sticker 
shock." ; The present invention offers a pay-as-you-go solution to wireless networks 
without introducing a separate product or brand. In addition, the present invention 
integrates into existing wireless networks technologies using the SMS channel. 

BRIEF DESCRIPTION OF THE DRAWINGS 

The invention, together with further advantages thereof, may best be understood 
by reference ic the following description taken in conjunction with the accompanying 
drawings in which: 

FIG. 1 illustrates a prior art smart card loading technique. 

FIG. 2 illustrates a prior art technique for making a purchase using a smart card. 

FIG. 3 illustrates a smart card transaction system according to one embodiment 
of the invention. 

FIG. 4 illustrates a smart card loading system according to one embodiment of 
the invention. 

. FIG. 5A and 5B illustrates a process flow for the loading system of FIG. 4. 

20 FIG. 6 illustrates a smart card purchasing system according to one embodiment 

of the invention. 

FIG. 7 illustrates a process flow for the purchasing system of FIG. 6. 

FIG. 8 and 9 illustrate a computer system suitable for implementing 
embodiments of the present invention. 
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DETAILED DESCRIPTION OF THE INVENTION 

FIG. 3 illustrates a smart card transaction system 100 according to one 
embodiment of the invention. This high level diagram illustrates that system 100 
includes a mobile telephone 102 (also referred to as a wireless telephone, cellular 
5 telephone or handset), a smart card 18 able to be inserted into the handset, a 
telecommunications network 104 and a server computer 106 (which may be 
connected to other computers and/or communications networks). Thus, as opposed to 
the prior art loading and purchasing techniques shown in FIGS. 1 and 2 in which 
integrated units are used, FIG. 3 illustrates a distributed system in which the card 
10 reader is present within handset 1 02 and processing occurs at a remote location at 
server 106 or elsewhere. 

Handset 1 02 is any suitable mobile telephone that- incorporates a,smart card 
reader for reading smart card 18. Implementation of a eard ;reader inside a handset 
can be accomplished by those of skill in the art. In a preferred embodiment, system 
15 100 uses the Eurbpay-Mastercard-Visa (£MV) standard is which case handset 1 02 is 
, any handset that can read EMV smart cards and the card reader is an EMV-compliant 

smart card reader. The EMV standard is a known, published standard for 
* implementing the electromechanical interactions between a smart card and a card 
reader. Handset 102 may be preprogrammed with screens of information used to 
20 prompt the user or to give information to the user; alternatively, these screens may be 
downloaded via server 106. In a specific embodiment, the Motorola StarT AC D 
mobile telephone is used to implement the invention, and uses the Motorola StarTAC 
mobile smart card terminal (MST). Handset 102 also includes a subscriber 
identification module (SIM) which are well-known in the art. In a specific 
25 embodiment, the SIMphonIC JAVA SIM available from De la Rue is used. 

Smart card 18 is typically an ISO 7816 credit card-sized plastic card that 
includes one or more semiconductor integrated circuits. Also termed "chip cards," 
integrated circuit cards, memory cards or processor cards, a smart card can interface 
with a point-of-sale terminal, an ATM, or with a card; reader integrated within a 
30 computer, telephone, vending machine, or a variety of other devices. The smart card 
may be programmed with various types of functionality such as a stored-value 
application, a credit or debit application, a loyalty application, cardholder 
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information, etc. Although . a plastic card is currently the medium of choice for smart 
cards, it is contemplated that a.smart card may also be implemented in a smaller form 
factor. For example, it may attach, to a key chain or be embedded in a subscriber 
identification module (SIM) or application-specific integrated circuit (ASIC). 

5 A smart card may include a microprocessor, random access memory (RAM), 

read-only memory (ROM), non-volatile memory, an encryption module (or arithmetic 
unit), and a card reader (or terminal) interface. Other features may be present such as 
optical storage, flash EEPROM, FRAM, a clock, a random number generator, 
interrupt control, control logic, a charge pump, power connections, and interface 

10 contacts that allow the card to communicate with the outside world. Of course, a 
smart card may be implemented in many ways, iand need not necessarily include a 
, microprocessor or other features. 

The microprocessor is any suitable central processing unit for executing 
commands and controlling the device. RAM serves as temporary storage for 

15 calculated results and as stack memory. ROM stores the operating system, fixed data, 
standard routines, look up tables and other permanent information. Non-volatile 
memory (such as EPROM or EEPROM) serves to store information that must not be 
lost when the card is disconnected from a power source, and must also be alterable to 
accommodate data specific to individual cards or changes possible over the card 

20 lifetime. This information includes a card identification number, a personal 

identification number, authorization levels, cash balances, credit limits, and other 
information that may need to change over time. An encryption module is an optional 
hardware module used for performing a variety of encryption algorithms. Of course, 
encryption may also be performed in software. Applied Cryptography \ Bruce 

25 Schneier, John Wiley & Sons, Inc., 1996 discusses suitable encryption algorithms and 
is hereby incorporated by reference. 

The card reader interface includes the'Software and hardware necessary for 
communication with the outside world. A wide variety of interfaces are possible. By 
way of example, the interface may provide a contact interface, a close-coupled 
30 interface, a remote-coupled interface, or a variety of other interfaces. With a contact 
interface, signals from the integrated circuit are routed to a number of metal contacts 
on the outside of the card which come in physical contact with similar contacts of a 
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card reader device. A smart card may include a traditional magnetic stripe to provide 
compatibility with traditional card reader devices and applications, and may also 
provide a copy of the magnetic stripe information within the integrated circuit itself 
for compatibility. ■..■'.'! V 

5 Various mechanical and electrical characteristics of a smart card and aspects of 

its interaction with.a card reader device are described in Smart Card Handbook, W. 
Rankl and W. Effmg, John Wiley & Sons, Ltd., 1997, and are defined by the 
following specifications, all of which are incorporated herein by reference: Visa 
Integrated Circuit Card Specification, Visa International Service Association, 1996; 

1 0 EMV Integrated Circuit Card Specification for Payment Systems, EMV Integrated 
Circuit Card Terminal Specification for Payment Systems, EMV Integrated Circuit 
Card Application Specification for Payment Systems, Visa International, Mastercard, 
Europay, 1996; and International Standard; Identification Cards r Integrated 
Circuit(s) Cards with Contacts, Parts 1-6, International Organization for 

15 Standardization, 1987-1995. 

Telecommunications network 104 is any suitable wireless network 
implementing a particular protocol for allowing communication with handset 102. In 
general, any wireless application protocol (WAP) may be used. By way of example, 
the wireless technologies that may be used to implement telecommunications network 
20 104 are GSM (global system for mobile communications), CDMA (code division 
: multiple access), TDMA (time division multiple access), AMPS (advanced mobile 
telephone service), and PCS (personal communications service). 

In the preferred embodiment, the GSM technology is used.to implement 
network 104 to allow communication with handset 102. As is known in the art, GSM 
25 technology includes a voice channel and a data charineL The data channel is also 
termed the Short Message Service (SMS) channel and is used by the present 
invention to transfer information- pertinent to smart card transactions. SMS is a 
wireless processing protocol. capable of sending alphanumeric messages. 

By integrating defined chip commands with the SMS channel, the handset 
30 becomes a remote terminal load and purchase device. Chip commands are 

implemented as special alphanumeric messages in a defined format, containing 
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security data that use SMS as the communications channel. SMS is used as a delivery 
mechanism that allows users to place data in an "envelope" to be sent and "opened" 
by a destination. Chip commands are integrated by being placed in the envelope and 
opened by the recipient. In ether embodiments, the chip commands may be 
5 implemented in any suitable fashion, depending upon the protocol used. 

Server 106 is a server computer as will be explained in more detail below. 
Server 1 06 includes hardware and software for processing smart card transactions and 
may be any suitable computer implementing any suitable operating system. 
Computer 106 may be stand alone, or may also be connected to other processing 
1 0 computers and financial networks. 

SMART CARD LOADING SYSTEM 

FIG. 4 illustrates a smart card Hiding system 200 according to one embodiment 
of the invention. System 200 separates a loading transaction into local cardholder 
functions (using handset 1,02) and remote bank functions (occurring under the control 
15 of processing server 10c). The local cardholder functions occurring at handset 102 
include the interface to the inserted smart card IS, a display for providing the user 
with information and for accepting commands, the ability to select a load amount, and 
accept/cancel options. The remote banking functions include validating the 
transaction, securing funds, authenticating the transaction with the issuer and storing 
20 the transaction. 

Handset 102 includes an EMV smart card reader, a keypad, a display, a- 
subscriber identification module (SIM) and short message service (SMS) wireless 
capability. A SIM is a well known multi-application smart card chip located in the 
handset that identifies the user to the GSM network 202, and converts and encrypts 
25 voice to data. It also contains both load and purchase software applications to 

interface between the card/card reader and processing server 106. SMS is a data 
' processing channel of the GSM protocol that carries commands, instructions and 
electronic product delivery. 

In this embodiment, telecommunications- network 104 is a GSM network 202 

30 and is used as the communications channel to link the user's handset 102 with 

processing server 106 and the systems located downstream from it. 
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Processing gateway 106 is a server computer that includes software for 
conducting load transactions: Gateway 106 communicates with handset 102, funds 
issuer system 204 and issuer authentication syaterh 2X)6. After the user selects a load 
transaction, funds issuer system 204 sends an instruction to processing gateway 106 
5 that contains necessary funding information. Gateway 106 acts as a router processing 
load commands between the smart card and issuer authentication system 206, and 
between authentication system 206 and funds issuer system 204. In one embodiment, 
communication between server 106 and systems 204 and 206 takes place over any 
suitable financial network, although communication between the entities may also 
1 0 occur over the Internet or other similar networks. 

Funds issuer system 204 offers a bank's remote banking transactions to a user 
through GSM network 202. Issuer system 204 operates to secure funds from a 
particular source and can operated electronically withdraw cash-. from any suitable 
consumer account. For example,' should the userioad lvalue onto smart' card 1 B using 
.15 r system 200, funds issuer system 204: may operate to electronically withdraw the same 
dollar amount from a consumer .checking account at the user's bank. 

Issuer authentication system 206 allows an issuer to take liability for funds 
coming from funds issuer system 116 and any subsequent purchases made with the 
smart card. Fundamentally, system 206 is arranged to authenticate smart card 18 
20 using a secret key and can generate a response that is then verified by card IS before 
value is loaded onto the card. 

Data communications network 208 provides secure communications between 
systems 204/206 and clearing and administration system 210. Data communications 
network 208 may be any suitable communications network that allows secure 

25 communication between computers. For example, communication via media such as 
telephone lines, cable, fiber optic, microwave, satellite, etc., may be used. Existing 
networks using secure links such as ATM networks, the Internet or propriety 
networks may be used. In one embodiment of the invention, network 208 is 
implemented using VisaNet, an existing global clearing and settlement system 

30 provided by Visa International Service Association of Foster City, California. 
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Clearing and administration system 210 settles accounts between banks 
involving a cardholder's use of a smart card. In the case of a cardholder loading value 
onto a smart card, processing gateway 106 originates settlements for loading 
transactions. When a cardholder loads value onto a card, gateway 106 debits funds 
5 issuer system 204 and credits issuer authentication system 206. System 206 then 
advises clearing and administration system 110 through data communications 
network 208 for audit and card balance maintenance. System 210 maintains a value 
for each card within transaction system 100 by keeping a database that includes an 
identifier for each card and the current value of the card. When the card is 
10 incremented or decremented in value, the card's value in the database is adjusted 
accordingly. 

Once the cardholder uses the value on the card to purchase merchandise from a 
merchant, the card is decremented and the merchant submits a request to its bank (the 
acquiring bank) for payment. r Clearing and administration system 2 1 0 then transfers a 
1 5 lump sum to the acquiring bank- using a suitable settlement service to pay the various 
merchants having a relationship with xhe acquirer. Based upon previous collection 
data, the acquirer then transfers an appropriate amount of money to each merchant 
reflecting the value of the goods and/or services that that merchant had provided that 
day to cardholders based upon deductions from their smart cards. Clearing and 
20 administration system may be implemented in many ways. Well-known systems that 
may be used include the clearing and administration system used by Visa 
International Service Association of Foster City, California. 

FIG. 5A illustrates a process flow 300 for the loading system of FIG. 4. Flow 
300 describes, one embodiment by which card 18 is loaded v/ith value using GSM 
25 network 202. In one embodiment, processing gateway 106 uses a different message 
format and protocol between the SIM and the authentication and .funds issuer 
systems. For loading, communication between the SIM and processing gateway 106 
may take place- using a protocol as defined by Motorola, De la Rue and Logica pic in 
one particular implementation of specifications published by Visa International. 
30 Communication between the gateway and the issuer authentication and funds issuer 
systems preferably uses the Visa ISO 8583 message format. 
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In step 302 user turns on handset 102 which responds by presenting a main 
menu in step 304 via the SIM present within the handset. In step 306 the user 
requests that a load occur using the handset; in' step- 3 07 the handset prompts the 
cardholder to insert a smart card and the SEVMssues a reset card- instruction to the 

5 card to open the smart card application. The smart card responds in step 308 with an 
ATR (Answer to Reset) response indicating the application is open. In step 309 the 
SIM determines the funding account information, the amount of value already present 
in the stored value application, and the maximum value that may be loaded. This 
card data is returned to the handset in step 310. In step 3 1 2 the user is prompted to 

10 enter the amount to be loaded. In step 314 the user enters an amount to be loaded. In 
one scenario, if a user desires to load more than the maximum amount or if a load 
would put the card's value over the maximum amount, the load request may be turned 
down. 

; * The cardStolder isnextprbr^ett^ 

15 ; account number (from which the funds' will be withdrawn) may be entered by the user 
at this poirit (in a homeibanking funding scenario) or the funding account number 
may be read Off of the smart card. When read off of the smart card, the funding 
account number is taken from magnetic strip image (MSI) data stored onto the smart 
card. The user's account number may also be obtained by reading a separate 

20 application on the same smart card or by reading an application on a different smart 

card (as described below). Funding account information may also reside elsewhere as 
in a separate application in the SIM or on file at the telecommunications network. 

In step 3 16 the user is also prompted to enter a code number (personal 
identification number) or password which is entered in stepi 318. In step 320 the 

25 smart card Issues a request for a random number from processing server 106. This 
random number will be used 'to form a cryptographic signature within the card that 
can be used to authenticate the card. The random number is requested from the 
processing gateway for higher security. In step 321, a suitable random number is 
returned to the SIM in the handset. In step 326 the SIM sends an Initialize For Load 

30 command to the card containing the random number which creates a cryptographic 
signature SI and : returns it to the SIM. 
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Cryptographic signatures are generated during load and purchase operations to 
authenticate the entities involved or to confirm that operations have occurred. A 
cryptographic signature ternled. ,, S^ , is used during a load operation and is typically 
generated by the smart card. A signature "S2" is used during a load or purchase 
5 operation and is generated by the issuer or a payment server. A signature "S3" is 

generated by the smart card on occurrence of a load or debit and is the final signature 
that confirms that the card has either loaded value onto, or debited value from, itself. 

Cryptographic signatures are well-known in the art and may be created in any 
suitable manner. Preferably, signatures SI ; S2 and/or S3 are created using a 

1 0 cryptographic key shared between the card and the issuer, data unique to the current 
transaction (including the random number), and data unique to the card. Preferably, 
the funding account number, card number, PIN or password, and all SI, S2 or S3 
signatures are encrypted under 128-bit triple DES between the SIM and the 
processing gateway, and again with different 128-bit triple DES keys between 

15 processing gateway 106 and the issuer authentication and funds issuer systems. 

In step 330 the SIM sends a Lead Request (including signature SI) and a Funds 
Request (including PIN or password), collectively f, load data," to processing gateway 
106. The Load Request message may include a variety of information and preferably 
includes the card signature SI , the card number, an expiry date, and a load amount. 
20 Other information such as a security algorithm, transaction counter, current card 

balance, and smart card number are also preferably provided. All of this information 
is prepackaged into a single Load Request message. The Funds Request message 
preferably includes the amount of funds to be loaded, the funding account number 
and the PIN or password. 

25 In step 332 the processing gatev/ay sends the Funds Request to funds issuer 

system 204 which determines (using the funding account number and the amount to 
be withdrawn) whether or not the user's account has enough funds to load the amount 
desired onto smart, card 18. Verification of the PIN or password also occurs. If there 
are enough funds, in step 336 the fands issuer sends a Funds. Response (which 

30 includes an approval code) back to processing gateway 106. In step 334 the Load 
Request is sent from processing gateway 106 to. issuer authentication system 206. 
This Load Request is essentially an authentication request that contains signature SI. 
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Authentication system 206 accepts the request, validates the card and SI data, and 
responds with a Load Response (including an approval) and a cryptographic signature 
S2 used for verification by the smart card in step-338: 

In step 340, assuming steps 336 and 338 are approvals, the processing gateway 
5 receives the Funds Response and Load Response with S2 and in turn, sends a single 
Approval Response with S2 to the SIM in the handset. In step 342 the SIM sends the 
Approval Response with S2 to card 18. The smart card then validates signature S2 
and loads value onto the card corresponding to the requested amount The card then 
generates a Load Confirmation message (including a Response Code) and a 
10 cryptographic completion signature S3. Signature S3 serves as prdof for ^repudiation 
purposes. In step 346 a shutdown is performed by closing the smart card application. 

In step 348 a message is displayed, to the user indicating that the. load has been 
approved and. the previous value on the card has been incremented to a new value. In 
step 350 the SIM sends the Response Code and signature S3, to processing gateway 

15 1 06 for logging and final validation. In step 352 the processing gateway issues a 
Settlement Funds Request to funds issuer 204 -in order to commence debiting the 
cardholder account and transferring liability from the funds issuer for the authorized 
debit. In step 354 the processing gateway also issues a Settlement Load Request 
including the signature S3 to authentication system 206 in order to commence 

20 crediting the issuer authentication system and transferring liability to the issuer 

authentication system for the authorized credit. In step 356 the funds issuer system 
issues a Settlement Funds Response t6 the 352 Funds Settlement Request that 
completes debiting the cardholder account and transferring liability from the funds 
issuer for the authorized debit. In step 358 the authentication system issues a 

25 Settlement Load Response that completes crediting the issuer authentication system 
and transferring liability to the issuer authentication system for the authorized credit. 

Flow 300 illustrates how cryptographic signatures, S 1, S2 and S3 are used to 
authenticate a smart card to an issuer authentication system. Other techniques for 
implementing prboess : flow 300 may also be used: For a multi-application smart card 
30 that includes credit, debit and/dr stored-value applications, it may be desirable to 
more securely authenticate the funds that are available. For example, it may be 
desirable to authenticate a smart card with funds issuer system 204. In this 
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embodiment, an authorization request certificate (ARQC) and an authentication 
response certificate (ARPC) allow the funds issuer to authenticate the card and vice- 
versa, with a final resulting transaction certificate (TC) produced by the smart card to 
serve for irrepudiation purposes. In this scenario, a credit or debit application on a 
5 multi-application smart card is being used as the source of funds and makes use of the 
ARQC, ARPC and TC in a similar manner as is served with the SI, S2 and S3 
cryptographic signatures. Preferably, implementation of both the ARQC and ARPC 
is done with accordance the document Visa Integrated Circuit Card Specification 
referenced above. 

10 In this scenario, the following steps would occur after step 3 1 8 and before step 

320, preferably. First, the stored-value application on the multi-application smart 
card is temporarily shut dowii' in order to open up another application on the smart 
card such as the credit Or debit application. The opened' application creates a Funds 
Request including ah ARQC cryptographic signature; The'ARQC is a cryptogram 

1 5 that uses a key known only to the funds issuer, transaction data including a random 

number, the card number arid the requested debit amount. The Funds Request and the 
ARQC are sent by the SIM to processing gateway 1 06 which passes them on to funds 
issuer 204. Funds issuer 204 authenticates that the smart card and application are 
valid, and then formulates an authentication response certificate (ARPC). 

20 The ARPC is a cryptogram that uses a key known only to the smart card 

application. It is created from the ARQC and transaction data including the response 
code. As part of a Funds Response message, the funds issuer includes the ARPC to 
the processing gateway 106 which passes it to the smart card via the SIM. Finally, 
the smart card validates the ARPC that authenticates that the funds issuer system 

25 approved the request message. At this point, the card may continue with the process 
of loading the dollar amount onto the card. Alternatively, as the approval from funds 
issuer 204 is independent of a load, the amount approved may also be applied toward 
a purchase cr other use. Control would now return to step 320 of FIG. 5 A for the 
stored value load. 

30 SMART CARD PURCHASING SYSTEM 
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FIG. 6 illustrates a smart card purchasing system 400. Purchasing system 400 
separates a purchase transaction into local cardholder and remote merchant functions. 
Local cardholder functions include a smart, card interface, a handset display and 
accept/cancel options. Remote merchant functions include validation of the 
5 transaction, communication with central systems and storing the transactions. GSM 
network 202 is a communications channel that links handset 102; merchant server 
410 and payment server 412, via gateway 106. 

Various of the components of FIG. 6 have previously been described in FIG. 4. 
In addition, merchant server 410 is any suitable computer that offers the user a 
1 0 product or a service over the GSM net\york to be displayed on handset 1 02. Payment 
server .41 2 includes a. merchant's ecDmputer hardware, physical terminal logic, a 
. . security card 418 and a modem.. The terminal Ipgic and security card 4,1 8 store 

transaction information andmar^ge the security of the transaction by validating the 
.integrity of the .user's smart;card JJ^ the 
15 transactions and manages the ^ansr^i5si9n ; of the trans actipns to a concentration point 
.computer 420. From, the concentration point, the ^transactions are sent to a central 
. . .clearing and administration system. 210 for validation, clearing ,and settlement via 
data communications network 208. - ; :; - 

Processing gateway 106 acts as a router for processing purchase commands and 
20 instructions between card 18 and payment server 412 and between payment server 
412 and merchant server 410. Members 430 are various member banks and other 
financial institutions that act as acquirer or issuer within system 400. 

FIG. 7 illustrates a process flow 500 for the purchasing system of FIG. 6. This 
flow describes one embodiment using the GSM network. Through process flow 500, 
25 a user with a handset may order and pay for products and/or services via handset 1 02 
using a smart card stored value application. 

In one embodiment, processing gateway 106 uses a different message format 
and protocol between the SIM and the upstream systems. For purchase, 
communication between the SIM and processing gateway 106 may take place using a 
30 protocol as defined by Motorola, De la Rue and Logica pic in one particular 

implementation of specifications published by Visa International. Communication 
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between the gateway and the upstream systems preferably is implemented as 
described in U.S. patent applications Nos. 08/951,614 and 09/070,488 referenced 
above. 

In step 502 a merchant solicits a user to purchase products and/or services by a 
5 solicitation message from merchant server 410 via gateway 106 and GSM network 
202 to handset 102. Alternatively, a user may use the handset and its menu to access 
merchant servei 410 to view or list products and/or services for purchase. In step 504 
the user uses the displays and keys of the handset to place an order for a product or 
service. In step 506 the handset sends the order request to processing gateway 106. 
10 In step 508 the gateway sends the request to merchant server 410 along with a request 
for specific merchant data. This merchant data includes a merchant identifier and 
transaction identifier. 

In step 510 the merchant transmits a v/ireless application protocol markup 
language (WML) page or other formatted message that includes the merchant data to 

1 5 gateway 106. In step 512 the gateway formulates a purchase instruction that includes 
the item to be purchased, its amount, the merchant identifier and transaction identifier 
and sends the instruction to the SIM in the handset. In step 514 the SIM displays a 
confirmation screen to the user who in step 516 confirms the item and the amount for 
purchase. In step 518 the handset sends this confirmation on to the SIM. The handset 

20 then in step 520 sends an Initialize For Purchase message (thai includes a reset 
command) to card 1 8. In step 522 the card sends a Response To Initialize for 
Purchase message (which includes an ATR) back to the SIM. 

In step 524 the SIM formulates a Draw Request including the card number, the 
amount and the merchant data. The Draw Request is then sent on to gateway 106. In 
25 step 526 the Draw Request is sent to payment server 412 along with merchant data. 
Next in step 527, the payment server processes the draw request in conjunction with 
associated security card 418 as will be explained in greater detail below. 

The payment server then receives an OK to Debit command arid a security card 
signature S2 from the security card; The security card signature S2 is a value that 
30 uniquely identifies and validates security card 41 8 to prove to card 1 8 that the 
incoming debit command is a valid command from a real security card. This 
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validation ensures that when the smart card is debited the financial totals in the 
security card are updated. Thus, the user of the smart card is guaranteed that a valid 
debit of the card has occurred. In a preferred embodiment of the invention, signature 
S2 is an encrypted value ensuring that no other entity can forge an identity of a 
5 security card. 

In step 528 the payment server sends the OK to Debit command along with 
the signature S2 to gateway 106, Gateway 106, in turn, sends OK to Debit and S2 to 
card 18 in step 530 for the card to debit itself. Upon receiving the OK to Debit 
command and S2, card 18 verifies signature S2, debits itself by the purchase amount, 

10 and also generates a Debit Result message (presumed to be successful) and a card 

signature S3. The card signature S3 is a unique value identifying a valid smart card. 
In a preferred embodiment of the invention, this signature is in encrypted form to 
prevent tampering. If the card does not have enough value to satisfy the purchase 
amount, then the Debit Result message indicates as such. In step 532, card 18 sends 

15 the Debit Result message along with' signature S3 back to gateway 1 06.' At this point, 
the purchase amount has been deducted from the balance on card 1 8. Next, in step 
534, the gateway sends Debit fcesult and S3 to payment server 412. 

The payment server then directs this received message to security card 418. 
The security card processes this message and verifies the received card signature S3. 
20 As the security card contains the keys and algorithms necessary to compute card 

signatures, the.security card is, able to validate that a received card signature is in fact 
a valid one by comparing this card signature with a generated expected value. A 
successful comparison indicates that a successful Debit Result message received from 
the card is in fact a valid success message and that the card has been debited. An 

25 error result code or a comparison that is not successful potentially indicates that the 
card has not been debited by the proper amount. This comparison of card signatures 
bj> the security card ensures that a smart card is in fact debited before merchant server 
410 is directed to release the purchased merchandise! Assuming that the transaction 
is so far valid, the security ppxd sends a Confirmation message back to the payment 

30 .server which is relayed in step 536 to the gateway. ■ . — 

In step 538 gateway V06 passes the Confirmation message on to merchant 
server 410. The merchant server registers this message and checks for success. The 
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merchant server calls a validate routine with the Confirmation message to validate the 
message. The validate routine takes the transaction identifier along with the 
encrypted Confirmation message to decrypt the Confirmation message. If the 
decrypted Confirmation message is acceptable, the merchant server then determines 
5 that a successful transaction has occurred. The merchant server then delivers the 
purchased electronic information to handset 102, or mails a product to the user. 
Alternati vely, the merchant server may generate an electronic purchase receipt to 
deliver, to the handset indicating goods and/cr services to be rendered. 

COMPUTER SYSTEM EMBODIMENT 

10 FIGS . 8 and 9 illustrate a computer system 900 suitable for implementing 

embodiments of the present invention. FIG. 8 shows one possible physical form of 
the computer system. Of course, the computer system may have many physical forms 
ranging from an integrated circuit, a printed circuit board and a small handheld device 
up to a huge super computer. Computer system 900 includes a monitor 902, a display 

15 904, a housing 906, a disk drive 908, a keyboard 910 and a mouse 912. Disk 914 is a 
computer-readable medium used to transfer data to and from computer system 900. 

FIG. 9 is an example of a block diagram for computer system 900. Attached to 
system bus 920 are a wide variety of subsystems. Processor(s) 922 (also referred to 
as central processing units, or CPUs) are coupled to storage devices including 
20 memory 924: Memory 924 includes random access memory (RAM) and read-only 
memory (ROM). As is well known in the art, ROM acts to transfer data and 
instructions uni-directiona!ly to the CPU and RAM is used typically to transfer data 
and instructions in a bi-directional manner. Both cf these types of memories may 
include any suitable of the computer-readable media' described below. A fixed disk 

25 926 is also coupled bi-directionally to CPU 922; it provides additional data storage 
capacity and may also include any of the computer-readable media described below. 
Fixed disk 926 may be used to store programs, data and the like and is typically a 
secondary storage medium (such as a hard disk) that is slower than primary storage. 
It will be appreciated that the information retained within fixed disk 926, may, in 

30 appropriate cases, be incorporated in standard fashion as virtual memory in memory 
924. Removable disk 914 may take the form of any of the computer-readable media 
described below. 
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CPU 922 is also coupled to a variety of -input/output devices such as display 
904, keyboard 910, mouse 912 and speakers 930V In general, an input/output device 
may be any of: video displays, track balls, mice, keyboards, microphones, touch- 
sensitive displays, transducer card readers, magnetic or paper tape readers, tablets, 

5 styluses, voice or handwriting recognizers, biometrics readers, or other computers. 
CPU 922 optionally may be coupled to another computer or telecommunications 
network using network interface 940. With such a network interface, it is 
contemplated that the CPU might receive information frorfi the network, or might 
output information to the network in the course of performing the above-described 

10 method steps. Furthermore, method embodiments of the present invention may 

execute solely upon CPU 922 or may execute over a network such as the Internet in 
conjunction with a remote CPU that shares a portion.of the processing. 

In addition, embodiments of the present invention further relate to computer 
storage products with a computer-readable medium that have computer code thereon 

15 for performing various computer-implemented operations. The media and computer 
code may be those specially designed and constructed for the purposes of the present 
invention, or they may be of the kind well known and available to those having skill 
' , in the computer software arts. Examples of computer-readable media include, but are 
not limited to: magnetic media such as hard disks, floppy disks, and magnetic tape; 

20 optical media such as CD-ROMs and holographic devices; magneto-optical media ^ 
such as floptical disks; and hardware devices that are specially configured to store 
and execute program code, such as .application-specific integrated circuits (ASICs), 
programmable logic devices (PLDs) and ROM and RAM devices. Examples of 
computer code include machine code, such as produced by a compiler, and files 

25 containing higher. level code that are executed by a computer using an interpreter. 

Although the foregoing invention has been described in some detail for 
purposes of clarity of understanding, it will be apparent that certain changes and 
modifications may be practiced within the scope of the appended claims. Therefore, 
the described embodiments should be taken as illustrative and not restrictive, and the 
30 invention should not be limited to the details given herein but should be defined by 
the following claims and their full scope of equivalents. 
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CLAIMS 

1 . A smart card loading system for loading value over a telecommunications 
network onto a smart card, said smart card loading system comprising: 

a mobile telephone handset in communication with said telecommunications 
network, said handset including a card reader for communicating with a smart card 
arranged to be inserted in said handset, and an input interface for indicating a value to 
be loaded onto said smart card, said handset being arranged to generate a request 
message to load said value onto said smart card; 

a gateway computer arranged to receive said request message from said 
handset over said telecommunications network and to retransmit said request 
message; 

a funds issuer computer arranged to receive said request message and to debit 
a consumer account associated with said smart card; and 

an authentication computer arranged to receive said request message and to 
authenticate said smart card, whereby said smart card may be authorized to load said 
value. 

2. A smart card loading system as recited in claim 1 wherein said 
telecommunications network is a wireless network. 

3. A smart card loading system as recited in claim 2 wherein said request 
message is integrated with the Short Message Service (SMS) channel of said 
telecommunications network. 

4. A smart card loading system as recited in claim 1 wherein said authentication 
computer authenticates said smart card using a first cryptographic signature and 
generates a second cryptographic signature to authenticate a load response, whereby 
said transaction is secured. 

5. A smart card loading system for loading value over a telecommunications 
network onto a smart card, said smart card loading system comprising: 
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a mobile telephone handset in communication with said telecommunications 
network, said handset including a card reader for communicating with a smart card 
arranged to be inserted in said handset, and an input interface for indicating a value to 
be loaded onto said smart card, said handset being arranged to generate a funds 
request message which includes an authorization request certificate; 

a gateway computer arranged to receive said funds request message from said 
handset over said telecommunications network and to retransmit said funds request 
message; 

a funds issuer computer arranged to receive said funds request message, to 
authenticate said smart card using said authorization request certificate, and to 
generate an authentication response certificate for delivery to said smart card, 
whereby said smart card may validate said authorization request certificate and load 
said value. 

6. A smart card loading system as recited in claim 5 wherein said 
telecommunications network is a wireless network. 

7. A smart card loading system as recited in claim 6 wherein said funds request 
message is integrated with the Short Message Service (SMS) channel of said 
telecommunications network. 

8 A smart card loading system as recited in claim 5 wherein in response to a 
successful load, said handset is arranged to generate a transaction certificate to be 
used for irrepudiation." 

9. A method of loading value over a telecommunications network onto a smart 
card, said method comprising: 

receiving at a mobile telephone handset a request from a user to load a value 
onto said smart card inserted in said handset; 

generating a funds request message which includes said value; 

sending said funds request message over said telecommunications network to 
a funds issuer computer arranged to debit an account associated with said user; 
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generating a load request message including a first cryptographic signature; 

sending said load request message over said telecommunications network to 
an authentication computer arranged to authenticate said smart card; 

receiving a response message which includes a second cryptographic 
signature and an approval to load; and 

validating said second cryptographic signature; and 

loading said value onto said smart card. 

10. A method as recited in claim 9 wherein said telecommunications network is a 
wireless network. 

11. A method as recited in claim 10 wherein said messages are integrated with the 
Short Message Service (SMS) channel of said telecommunications network. 

12. A method of loading value over a telecommunications network onto a smart 
card, said method comprising: 

receiving at a mobile telephone handset a request from a user to load a value 
into a stored-value application of said smart card inserted in said handset; 

opening a second application on said smart card capable of funding said 
stored-value application; 

generating a funds request message which includes said value and an 
authorization certificate; 

sending skid funds request message over said telecommunications network to 
a funds issuer computer arranged to authenticate said second application and to 
generate an authentication response certificate; ' " f 

receiving a response message which includes said authentication response 
certificate; 

validating said authentication response certificate; and 
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loading said value onto said stored-value application of said smart card from 
said second application. 

13. A method as recited in claim 12 wherein said. ; telecommunications network is 
a wireless network. 

14. A method as recited in claim 13 wherein said messages are integrated with the 
Short Message Service (SMS) channel of said telecommunications network. 

15. A method as recited in claim 12 further comprising: 
generating a transaction certificate to be used for irrepudiation. 

1 6. A purchasing system for purchasing an item over a telecommunications 
network, said purchasing system comprising: 

i ... said telecommunications network ^ for providing ; qpmmunication between 
entities; 

a mobile telephone handset in communication with .said telecommunications 
network, said handset including a card reader for communicating with a smart card 
arranged to be inserted in said handset, and an input interface, said handset arranged 
to generate an order request message; 

a merchant server computer arranged to receive said order request message 
and to generate a purchase instruction message intended for said handset; 

a payment server computer arranged to receive a draw request message from 
said handset, to generate a debit message intended for said smart card, and to confirm 
payment by said smart card to said merchant server computer, whereby said item is 
purchased over said telecommunications network and may be released to a user 
associated with said smart card. . 

17. A smart card loading system as recited in claim 16 wherein said 
telecommunications network is a wireless network. 
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18. A smart card loading system as recited in claim 17 wherein said messages are 
integrated with the Shore Message Service (SMS) channel of said telecommunications 

network. * : . 

■ (■*.■ \ 

1 9. A method of purchasing an item over a telecommunications network using a 
mobile telephone handset, said method comprising: 

sending an order request message to a merchant server computer; 

receiving a purchase instruction message from said merchant server computer; 

processing said purchase instruction message locally; 

sending a draw request message over said telecommunications network to a 
payment server computer; 

receiving a debit message which includes a first cryptographic signature and 
an approval to debit said smart card; and 

validating -said first cryptographic signature; and 

\ debiting.said smart card, whereby said item may be released to a user 
associated with said smart card. 

20/ A method as recited in claim 19 wherein said telecommunications network is 
a wireless network. 

21. A method as recited in claim 20 wherein said messages are integrated with the 
Short Message Service (SMS) channel of said telecommunications network. 

22. A method as recited in claim 19 further comprising: 

sending a result message which includes a second cryptographic signature 
over said telecommunications network to said payment server computer for 
confirmation, whereby said merchant server computer may be informed of said 
confirmation and release said item to said user. 
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